Privacy Policy

Effective date: November 10, 2026 for purchases made through third-party marketplaces and for customers who create an account on or after that date. For existing wellbefore.com and WellBefore app customers this version takes effect December 22, 2026; until then the version dated April 22, 2026 applies. Last updated November 10, 2026.

Social Medical Supply LLC, doing business as WellBefore (“WellBefore,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, protect, and retain personal information and describes your privacy rights and choices.

This policy applies to our website (wellbefore.com), the WellBefore mobile app for iOS and Android (the “app”), customer-service interactions, and personal information we receive in connection with purchases through third-party marketplaces, including Target Plus, Amazon, and Walmart.

1. Personal Information We Collect

Depending on how you interact with us, we collect the following types of personal information:

• Contact information: Your name, email address, telephone number, and shipping and billing addresses.
• Account information: Account identifiers, authentication information, account preferences, and information used to maintain and secure your account.
• Transaction information: Products purchased, order history, payment status, subscriptions, returns, refunds, store-credit and loyalty program information.
• Customer-service information: Messages, questions, feedback, and other information you provide when contacting us.
• Website and app activity: Information about devices and interactions with our services, such as IP address, browser or device information, device and advertising identifiers, pages or screens viewed, searches made in the app, app usage, crash and performance data, and activity associated with cookies, pixels, SDKs or similar technologies.
• Preferences and interests: Preferences you provide and inferences used to understand customer interests and provide relevant recommendations.
• Program information: Information needed to administer referral, affiliate, subscription, or store-credit programs in which you participate.
• Business-customer information: Company name and relevant business or tax-exemption details.

Payments are processed by our payment processors (including Shopify Payments, Shop Pay, PayPal, Amazon Pay and Google Pay, and the wallet payments offered at checkout), which handle your card details directly, on our website and in the app; eligible HSA/FSA debit cards process as ordinary card transactions. We do not receive or store full card numbers. We retain the payment method type, the last four digits of the card, the billing name and address, and the payment status needed to confirm payment, fulfil orders, process refunds, maintain records and prevent fraud.

2. How We Collect Personal Information

We collect personal information:

• Directly from you when you create an account, pflace an order, subscribe, contact us, or participate in our programs.
• Automatically when you interact with our website, through cookies, pixels and similar technologies, and with our app, through software development kits (SDKs), device identifiers and app analytics.
• From service providers supporting payments, shipping, fulfillment, authentication, and customer service.
• From marketplaces through which you purchase our products.
• From analytics and advertising partners where applicable to our services and your privacy choices.

Signing In

On our website, customer accounts are hosted by Shopify. When you sign in, we receive your e-mail address and a one-time verification code is sent to it. If you choose Sign in with Shop, Shop (operated by Shopify) authenticates you and provides us with your e-mail address and the account details you have saved with Shop; Shop’s use of your information is governed by Shopify’s privacy policy. In the app, you may also sign in with Google or Apple. When you do, we receive the information provided by that service, which may include a unique account identifier, your name, and your email address, depending on the service and your settings. Apple may provide a private relay email address instead of your personal email address.

We use sign-in information to verify your identity, give you access to your account and keep your session secure. We do not receive your Google or Apple password, and we do not store a password for accounts created on our website. Your account is shared between the website and the app.

3. How We Use Personal Information

We use personal information to:

• Process payments and fulfill and deliver orders.
• Provide, authenticate, and maintain customer accounts.
• Manage subscriptions, returns, refunds, and store credits.
• Provide customer service and respond to inquiries.
• Send order, account, service, and security communications.
• Administer referral and affiliate programs.
• Operate, troubleshoot, and improve our website and mobile apps.
• Prevent fraud and protect the security of our services.
• Send marketing communications and measure advertising where permitted by law and consistent with your choices.
• Comply with legal, tax, accounting, and contractual obligations and establish, exercise, or defend legal claims.

Information received through marketplaces is subject to the additional restrictions described in Section 5.

4. When We Disclose Personal Information

Providers Supporting Our Services

We disclose personal information as needed to providers supporting our operations, including our e-commerce platform, authentication providers, payment processors, fraud-screening providers, fulfillment and warehousing partners, our mobile-app platform provider, subscription and loyalty program providers, shipping carriers, customer-service tools, communications providers, technology providers, and professional advisers.

Where providers process information on our behalf, their use is subject to applicable contractual restrictions and legal requirements.

Analytics and Advertising Partners

We work with analytics and advertising partners to understand use of our services, measure campaigns, and display relevant advertising. Depending on the activity, a partner may act as a service provider or as a third party.

Some advertising-related disclosures may qualify as a sale or sharing of personal information or processing for targeted advertising under applicable state law. See Section 10 for additional disclosures and choices.

Legal and Business Purposes

We may disclose information to comply with applicable law or valid legal process; protect rights, property, or safety; investigate fraud or misuse; or establish, exercise, or defend legal claims.

We may also disclose information in connection with a proposed or completed merger, acquisition, reorganization, or sale of business assets, subject to applicable law and contractual restrictions.

5. Third-Party Marketplace Orders, Including Target Plus

When you purchase a WellBefore product through Target Plus, Amazon, Walmart, or another marketplace, the marketplace collects information under its own privacy policy and provides us with information associated with your order.

Information We Receive

We may receive your name, shipping address, products ordered, order and shipment identifiers, and, where the marketplace provides it, contact information and order-related customer-service communications.

How We Use the Information

We use marketplace information to fulfill and ship orders; communicate about shipment, cancellations, or delays; handle returns, refunds, and order-related support; prevent fraud; and meet applicable legal and marketplace obligations.

Who Has Access

Access is limited to staff and providers who need the information for permitted purposes, including fulfillment and warehousing partners, shipping carriers, customer-service providers, and order and inventory technology providers.

When Information Is Disclosed

We disclose marketplace information to those providers and the relevant marketplace as necessary for permitted purposes. Other disclosures occur only where permitted by applicable law and marketplace contractual restrictions.

For Target.com orders, information is shared with Target Corporation. Target’s collection and use of information are governed by Target’s Privacy Policy.

Restrictions on Marketing

We do not use personal information received through a marketplace, including Target Plus, to send marketing communications, add customers to marketing lists, or conduct surveys, contests, or sweepstakes. We do not combine that information with other information for those purposes or sell or share it for targeted advertising. Marketplace customer information is kept separate from our marketing systems and is not loaded into our e-mail, SMS, push-notification, loyalty or advertising tools.

We protect marketplace information using the safeguards described in this policy and retain it only as necessary for permitted purposes and applicable legal and contractual obligations.

6. Cookies, Analytics, and Privacy Choices

Our website and app use cookies, pixels, and similar technologies for authentication, functionality, preferences, affiliate tracking, analytics, fraud prevention, and advertising.

We use behavioral analytics, which may include heatmaps and session replay, to understand website interactions and improve the service. We also measure email engagement, such as whether an email is opened or a link is clicked.

Advertising and analytics partners, including Meta, Google, AdRoll and Taboola, may collect website activity through cookies or pixels to measure our advertising and show WellBefore advertisements on other websites and apps. We use Klaviyo and Attentive to send and measure e-mail and text-message communications, Microsoft Clarity for heatmaps and session replay, Trustpilot for reviews, Zigpoll for on-site surveys, affiliate-network tracking (ShareASale) to credit referrals, and NoFraud to screen orders for fraud. A current list of the technologies in use is available on request.

You can manage cookies through browser settings and any privacy controls provided on our website. Restricting certain technologies may affect functionality. Where applicable law requires consent for nonessential tracking, we obtain that consent through the cookie banner shown on our website.

Our app is built on the Appbrew platform and may include SDKs from our analytics, advertising and messaging partners, such as Meta, Google and Klaviyo, which can collect a device identifier, app usage, searches and crash data. On iOS, the app asks for your permission before tracking your activity across other companies’ apps and websites, and you can change that choice in your device’s privacy settings; on Android, you can reset or limit use of the advertising ID in device settings. You can turn push notifications on or off at any time in your device settings. Browser cookie preferences do not apply inside the app.

Marketing Communications

You can unsubscribe from marketing emails using the unsubscribe link in an email or by contacting support@wellbefore.com. We honor email opt-outs promptly and within ten business days, or sooner where required by applicable law.

For marketing text messages, reply STOP to any message or follow the opt-out instructions in the message. You can turn off app push notifications in your device settings. Opting out of marketing does not prevent necessary order, account, security, or other nonmarketing communications.

7. Retention and Deletion

We retain personal information for as long as reasonably necessary for the purposes described in this policy. Retention depends on the nature and sensitivity of the information, the customer relationship, legal and accounting requirements, contractual restrictions, fraud prevention, and dispute-resolution needs.

Account information is retained as needed to provide the account and meet applicable obligations. Order and transaction records are retained for applicable tax, accounting, legal, and contractual purposes. Customer-service records are retained as needed to resolve inquiries and related issues.

As a guide, order and transaction records are kept for up to seven years to meet tax, accounting and warranty obligations; customer-service records for three years after the enquiry is closed; and marketing records until you unsubscribe or after twenty-four months without engagement, except for a suppression record that lets us honour your opt-out. Marketplace order records are kept only for the period needed to fulfil the order, handle returns and meet tax and marketplace obligations, and are not used for any other purpose.

Marketing information is retained according to consent, preferences, engagement, and applicable requirements. We may keep limited suppression records to remember and honor an opt-out.

Marketplace information is retained subject to the restrictions described in Section 5.

When information is no longer needed, we take reasonable steps to delete, de-identify, or securely dispose of it.

You may request deletion by contacting support@wellbefore.com. Deletion of an account does not necessarily delete records that we are required or permitted to retain. We will explain applicable exceptions when responding to your request.

8. Security Measures

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, and misuse. These include access controls and safeguards appropriate to the information and systems involved.

No method of transmission or storage is completely secure. Where a security incident requires notification under applicable law, we will notify affected individuals and authorities as required.

Please protect your sign-in credentials and contact us if you suspect unauthorized access to your account.

9. Children’s Privacy

Our website and app are intended for adults and are not directed to children under 13. Products intended for infants or children are intended to be purchased by adults.

We do not knowingly collect personal information directly from children under 13 through our website or app. If you believe a child has provided information, contact support@wellbefore.com so we can investigate and take appropriate action, including deletion where required.

10. United States State Privacy Rights

Depending on your state of residence and whether applicable law covers our processing, including under California, Colorado, Texas, and other state privacy laws, you may have the following rights:

• Confirm whether we process your personal information.
• Access your information and details about its collection, use, and disclosure.
• Obtain a portable copy of your information.
• Correct inaccurate information.
• Request deletion, subject to applicable exceptions.
• Opt out of sale, sharing, targeted advertising, or certain profiling that produces legal or similarly significant effects.
• Limit certain uses or disclosures of sensitive personal information or withdraw consent where applicable.
• Appeal a decision concerning a privacy request.
• Exercise applicable rights without unlawful discrimination.

California Collection and Disclosure Information

During the preceding 12 months we collected these categories of personal information: identifiers (name, e-mail address, telephone number, postal address, account ID, IP address, and cookie, device and advertising identifiers); customer records (billing name and address, payment method type and last four digits); commercial information (products purchased or considered, order history, subscriptions, returns, store credits and loyalty activity); internet, network and app activity (pages or screens viewed, searches, time on site, referring links, crash and performance data, and interactions recorded by cookies, pixels, SDKs and session-replay tools); approximate geolocation derived from IP address; inferences used for product recommendations and marketing; and sensitive personal information limited to account sign-in codes and purchases that may reveal a health interest.

The sources and purposes of collection are described in Sections 2 and 3. Retention criteria are described in Section 7.

During the preceding 12 months we disclosed the following categories for business purposes: identifiers, customer records and commercial information to our e-commerce platform (Shopify), mobile-app platform (Appbrew), payment processors, fraud-screening provider, fulfillment and warehousing partners, shipping carriers, subscription and loyalty providers, customer-service tools, e-mail, SMS and push-notification providers, and professional advisers; and internet and app activity to analytics providers.

During the preceding 12 months we shared the following categories with advertising networks (Meta, Google, AdRoll, Taboola and affiliate networks) for targeted advertising, through website pixels and app SDKs, which state law may treat as a sale or sharing: identifiers (including hashed e-mail addresses and cookie, device or advertising identifiers), internet and app activity, and commercial information about products viewed or purchased. We did not sell personal information for money.

Sensitive Personal Information

We collect account sign-in codes to authenticate you, and the products you buy may reveal a health interest (for example, a purchase of respiratory masks or an HSA/FSA-eligible item). Purchases and customer-service communications may therefore contain or reveal health-related information.

We use this information only to fulfil your order, provide customer service, manage subscriptions and returns, and meet legal obligations. We do not use it to infer characteristics about you and we do not share health-related product information with advertising partners. You may exercise applicable rights concerning this information by contacting us. Our Consumer Health Data Privacy Policy [link to be added] describes our practices for residents of Washington, Nevada and Connecticut.

Sale, Sharing, and Targeted Advertising

We do not sell personal information for money. Certain advertising-related disclosures may nevertheless constitute a sale or sharing under state law.

You may exercise applicable opt-out rights through the “Do Not Sell or Share My Personal Information” link in the footer of our website or by emailing support@wellbefore.com. App users can withdraw the tracking permission in their device settings and may e-mail the same address to exercise applicable choices for their account.

We honor Global Privacy Control and other recognized opt-out preference signals where required by applicable law. A signal may apply to the browser or device sending it; where required and we can associate it with an account, we apply it to that account. Preferences may need to be set separately on other browsers or devices.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

How to Submit a Request

Email support@wellbefore.com, call 214-416-9009, or write to the address in Section 13. Describe the right you wish to exercise and provide information reasonably necessary to locate the relevant records.

You do not need to create an account to submit a request. For access, correction, or deletion requests, we may verify your identity using information appropriate to the request. Sale or sharing opt-outs do not require identity verification, although we may need information necessary to process them.

Authorized agents may submit requests where permitted by law. We may request evidence of authority and any identity confirmation permitted for the particular request.

We respond within applicable legal deadlines. Access, correction, and deletion requests are generally answered within 45 days, subject to permitted extensions. Opt-outs and other requests may have shorter deadlines. We explain applicable extensions or denials.

Appeals

Where you have a right to appeal, email support@wellbefore.com with the subject “Privacy Request Appeal,” identify your original request, and explain your concern. We will respond within the applicable legal period and provide information about contacting the relevant regulator where required.

11. International Privacy Information

WellBefore operates in the United States. Information may be processed in the United States or other countries where our providers operate. Their laws may differ from those in your location.

Where applicable law requires safeguards for international transfers, we use an appropriate lawful transfer mechanism. Contact us for information about the safeguards applicable to your information.

European Union and United Kingdom
Where EU or UK data protection law applies, WellBefore acts as controller for processing for which it determines the purposes and means.

Our legal bases include performance of a contract for orders and requested services; compliance with legal obligations; legitimate interests in operating, securing, and improving our business where not overridden by your rights; and consent where required.

Subject to applicable conditions, you may request access, correction, erasure, restriction, or portability; object to processing, including direct marketing; and withdraw consent without affecting the lawfulness of earlier processing. You may complain to your local supervisory authority, including the UK Information Commissioner’s Office where applicable.

Canada and Australia

Where applicable Canadian or Australian privacy law applies, you may request access to or correction of your personal information, raise a privacy complaint, and exercise other rights provided by that law. Consent choices and withdrawal are subject to applicable legal and contractual limitations.

Contact us using Section 13 to exercise rights or raise concerns. We will respond within applicable legal periods and explain any limitations. You may also contact the relevant privacy regulator.

12. Changes to This Policy

We may update this policy from time to time. We will identify the updated version by its effective date and provide notification at least thirty business days before changes take effect, consistent with our existing notice commitment. We give notice by posting the updated policy with its new effective date on this page and, where the change materially affects how we use information we already hold about you, by e-mail to the address on your account or by notice in the app. The notice will explain how to exercise relevant choices.

Where applicable law requires consent for a new use of information, we will obtain that consent before beginning the use. Continued use of our services does not substitute for consent where consent is legally required.

13. Contact Us

For privacy questions, requests, or complaints, contact: